Cisco Cisco Small Business IP Phones

7 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2021-13797.4.8 ; 7.4.3 ; 7.5.5a ; …Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service VulnerabilitiesMEDIUM 6.50.3 %
CVE-2024-204517.6.0 ; 7.6.2 ; 7.6.2SR3 ; …Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA5HIGH 7.50.8 %
CVE-2024-204547.6.0 ; 7.6.2 ; 7.6.2SR3 ; …Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA5CRITICAL 9.86.6 %
CVE-2024-204507.6.0 ; 7.6.2 ; 7.6.2SR3 ; …Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA5CRITICAL 9.87.2 %
CVE-2023-201817.6.0 ; 7.6.2 ; 7.6.2SR3 ; …A vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remoteMEDIUM 6.10.5 %
CVE-2023-202187.6.0 ; 7.6.2 ; 7.6.2SR3 ; …A vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remoMEDIUM 6.10.5 %
CVE-2023-20126n/aCisco SPA112 2-Port Phone Adapters Remote Command Execution VulnerabilityCRITICAL 9.837 %